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This listing of claims replaces all prior versions, and 
listings of claims in the instant application: 

Listing of Claims: 

1. (Currently Amended) A method for executing an 
obfuscated application program, the method comprising: 

receiving , on a user device, an obfuscated 
application program that comprises application program 
instructions and application program data; 

determining , in said user device during said 
execution of said obfuscated application, an 
application program instruction location permutation to 
apply to a current instruction counter value; 

determining, i n said user device during said 
execution of said obfuscated application, an 
' application program data location permutation to apply 
\ to a current data location counter value; 
! receiving , in said user device during said 

execution of said obfuscated application, said current 
instruction counter value; 

app 1 y i ng , in said user device during said 
execution of said obfuscated application, said 
application program instruction location permutation to 
said current instruction counter value to obtain a 
first reference to an application program instruction^ 
in an instruction stream^ to execute; 

if said application program instruction references 
application program data, applying , in said user device 
during said execution of said obfuscated application, 
said application program data location permutation to 
data referenced by said application program instruction 
to obtain a second reference to data to access, said 
data to access interleaved with application program 
instructions in said instruction stream; and 
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executing , in said user device during said 
execution of said obfuscated application, said 
application program instruction. 



2. (Original) The method of claim 1 wherein said 
application program data comprises at least one 
cryptographic key for use in decrypting data. 

3. (Original) The method of claim 1 wherein at least 
some of said data to access is formatted to appear like one 
or more valid instructions. 
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4. (Original) The method of claim 1 wherein at least 
some of said data to access comprises randomized data. 

5. (Original) The method of claim 4 wherein said 
randomized data is formatted to appear like one or more 
valid instructions. 

6. (Currently Amended) The method of claim 1, further 
comprising: 

determining ,' in said user device during said 
execution of said obfuscated application, whether there 
is another application program instruction to be 
executed; 

advancing , in said user device during said 
execution of said obfuscated application, said current 
instruction counter if there is another application 
program instruction to be executed; and 

repeating , in said user device during said 
execution of said obfuscated application, said 
receiving said current instruction counter value , said 
apply ing transf ormings and said executing after said 
advancing . 

7. (Currently Amended) A method for application 
program obfuscation, the method comprising: 



Page 3 of 23 



Appl. No. 10/673,021 

Amdt. dated November 9, 2007 

Reply to Advisory Action of November 1, 2 007 



GUNNISON, McKAY & 

HODGSON, L.L.P. 
Garden West Office Plaza 
1 900 Garden Road, Suite 220 
Monterey, CA 93940 

(831)655-0380 
Fax (831)655-0888 



reading , at an application program provider, a 
first application program comprising application 
program instructions and application program data 
wherein execution of said first application program 
itself provides a service ; 

determining , at said application program provider, 
an application program instruction location 
permutation; 

determining, at said application program provider, 



a memory storage location for at least one application 
program instruction of said first application program; 

that tranoformo transforming, at said application 
program provider, said memory storage location using 
said application program instruction location 
permutation to generate oaid firot application program 
into an obfuscated application program-? — oaid obfuocatcd 
application program having at least one application 
program instruction stored at a memory location that is 
based at least in part on a permutation of the memory 
storage location of whore the corrcoponding said at 
least one application program instruction io otorcd in 
said first application program; 

determining a firot inotruction location of oaid 
firot application program; 

determining , at said application program provider, 
an application program data location permutation^ 

determining, at said application program provider, 



a memory storage location for at least one datum of 
said first application program; 

that tranof ormo transf orming, at said application 
program provider, said storage memory location of said 
at least one datum using said application program data 
location permutation to generate oaid firot application 
program into an obfuocatcd application program, in said 
obfuscated application program^ having at least one 
application program datum stored at a memory location 
that is based at least in part on a permutation of the 
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memory storage location where the corrcoponding 
application program datum of said at least one datum -is- 
otorod in said first application program [[;]] j_ 

determining a firot data location of oaid first 
application program; 

wherein said transforming using applying said 
application program instruction location 
permutation and said transforming using said 
application program data location permutation^fce 
oaid firot application program to create an 
obfuocatcd application program comprioing creates 
an instruction stream for said obfuscated 
application program having application program 
data interspersed with application program 
instructions; and 

sending , at said application program provider, 
said obfuscated application program. 

8. (Original) The method of claim 7 wherein said 
application program data comprises at least one 
cryptographic key for use in decrypting data. 

9. (Original) The method of claim 7 wherein at least 
some of said data to access is formatted to appear like one 
or more valid instructions. 

10. (Original) The method of claim 7 wherein at least 
some of said data to access comprises randomized data. 

11. (Original) The method of claim 10 wherein said 
randomized data is formatted to appear like one or more 
valid instructions. 
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12. (Original) The method of claim 7, further 
comprising receiving an application program request from a 
user device, said determining occurring in response to said 



receiving . 
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13 . (Currently Amended) The method of claim 7 wherein 
said method further comprises [[,]] j_ 

after oaid applying oaid application program 
inotruction location permutation and oaid application 
program data location permutation, applying , f ol lowing 
completion of said transf ormings , a cryptographic 
process to said obfuscated application program together 
with a cryptographic key to create an encrypted 
obfuscated application program; and 

said sending comprises sending said encrypted 
obfuscated application program. 

14. (Currently Amended) A program storage device 
comprising a computer readable medium having embodied 
therein computer readable instructions, wherein execution of 
said computer readable instructions results in a method for 
executing an obfuscated application program, the method 
comprising: 

receiving , on a user device, an obfuscated 
application program that comprises application program 
instructions and application program data ; 

determining , in said user device during said 
execution of said obfuscated application, an 
application program instruction location permutation to 
apply to a current instruction counter value; 

determining, i n said user device during said 
execution of said obfuscated application, an 
application program data location permutation to apply 
to a current data location counter value; 

receiving , in said user device during said 
execution of said obfuscated application, said current 
instruction counter value; 
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app 1 y i ng , in said user device during said 
execution of said obfuscated application, said 
application program instruction location permutation to 
said current instruction counter value to obtain a 
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first reference to an application program instruction^ 
in an instruction stream^ to execute; 

if said application program instruction references 
application program data, applying , in said user device 
during said execution of said obfuscated application, 
said application program data location permutation to 
data referenced by said application program instruction 
to obtain a second reference to data to access, said 
data to access interleaved with application program 
instructions in said instruction stream; and 

execut ing , in said user device during said 
execution of said obfuscated application, said 
application program instruction. 

15. (Original) The program storage device of claim 14 
wherein said application program data comprises at least one 
cryptographic key for use in decrypting data. 

16. (Original) The program storage device of claim 14 
wherein at least some of said data to access is formatted to 
appear like one or more valid instructions. 

17. (Original) The program storage device of claim 14 
wherein at least some of said data to access comprises 
randomized data. 



18. (Original) The program storage device of claim 17 
wherein said randomized data is formatted to appear like one 
or more valid instructions. 



GUNNISON, McKAY & 

HODCSON, L.L.P. 
Garden West Oilice Plaza 
J 900 Garden Road, Suite 220 
Monterey, CA 93940 

(831)655-0880 
Tax (83 1)655-0888 



19. (Currently Amended) The program storage device of 
claim 14, said method further comprising: 

determining , in said user device during said 
execution of said obfuscated application, whether there 
is another application program instruction to be 
executed; 
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advancing , in said user device during said 
execution of said obfuscated application, said current 
instruction counter if there is another application 
program instruction to be executed; and 

repeating , in said user device during said 
execution of said obfuscated application, said 
receiving said current instruction counter value , said 
applying trans formings and said executing after said 
advancing. 

20. (Currently Amended) A program storage device 
comprising a computer readable medium having embodied 
therein computer readable instructions, wherein execution of 
said computer readable instructions results in a method for 
application program obfuscation, the method comprising: 
reading , at an application program provider, a 

first application program comprising application 

program instructions and application program data 

wherein execution of said first application program 

itself provides a service ; 

determining , at said application program provider, 

an application program instruction location 

permutation; 

determining, at said application program provider, 
a memory storage location for at least one application 
program instruction of said first application program; 

that transforms transforming, at said application 
program provider, said memory storage location using 
said application program instruction location 
permutation to generate said fir s t application program 
into an obfuscated application program-? — said obfuscated 
application program having at least one application 
program instruction stored at a memory location that is 



GUNNISON, McKAY & 

HODGSON, L.L.P. 
Garden Wca Office Plaza 
1900 Garden Road. Suite 220 
Monterey. CA 93940 

(831)655.0880 
Fax (831)655-0888 



based at least in part on a permutation of the memory 
storage location of where the corresponding said at 
least one application program instructio n io otorcd in 
said first application program; 
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determining a firat inatruction location of oaid 
firot application program; 

determining , at said application program provider, 
an application program data location permutation^ 

determining, at said application program provider, 
a memory storage location for at least one datum of 
said first application program; 

that tranof ormo transf orming, at said application 
program provider, said storage memory location of said 
at least one datum using said application program data 
location permutation to generate oaid firot application 
program into an obfuocatcd application program, in said 
obfuscated application program^ having at least one 
application program datum stored at a memory location 
that is based at least in part on a permutation of the 
memory storage location where the corrcoponding 
application program datum of said at least one datum^ s- 
otorcd in said first application program [ [ ; ] ] j_ 

determining a firot data location of oaid firot 
application program; 

wherein said transforming using gpplying said 
application program instruction location 
permutation and said transforming using said 
application program data location permutation— fee 
oaid firot application program to create an 
obfuocatcd application program compr i oing creates 
an instruction stream for said obfuscated 
application program having application program 
data interspersed with application program 
instructions; and 

sending , at said application program provider, 
said obfuscated application program. 
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21. 



(Original) The program storage device of claim 20 



wherein said application program data comprises at least one 
cryptographic key for use in decrypting data. 
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22. (Original) The program storage device of claim 20 
wherein at least some of said data to access is formatted to 
appear like one or more valid instructions. 

23. (Original) The program storage device of claim 20 
wherein at least some of said data to access comprises 
randomized data. 

24. (Original) The program storage device of claim 23 
wherein said randomized data is formatted to appear like one 
or more valid instructions. 

25. (Previously Presented) The program storage device 
of claim 20, said method further comprising receiving an 
application program request from a user device, said 
determining occurring in response to said receiving. 

26. (Currently Amended) The program storage device of 
claim 20 wherein 

said method f urther comprises [[,]] j_ 

after said applying oaid application program 
inotruction location permutation and oaid application 
program data location permutation, applying , following 
completion of said transf ormings , a cryptographic 
process to said obfuscated application program together 
with a cryptographic key to create an encrypted 
obfuscated application program; and 

said sending comprises sending said encrypted 
obfuscated application program. 

27. Currently Amended) An apparatus for executing an 
obfuscated application program, the apparatus comprising: 

means for receiving , on a user device, an 
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obfuscated application program that comprises 
application program instructions and application 
program data; 
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means for determining , in said user device during 
said execution of said obfuscated application, an 
application program instruction location permutation to 
apply to a current instruction counter value; 

means for determining, i n said user device during 
said execution of said obfuscated application, an 
application program data location permutation to apply- 
to a current data location counter value; 

means for receiving , in said user device during 
said execution of said obfuscated application, said 
current instruction counter value; 

means for applying , in said user device during 
said execution of said obfuscated application, said 
application program instruction location permutation to 
said current instruction counter value to obtain a 
first reference to an application program instruction^ 
in an instruction stream^ to execute; 

means for, if said application program instruction 
references application program data, applying , in said 
user device during said execution of said obfuscated 
application, said application program data location 
permutation to data referenced by said application 
program instruction to obtain a second reference to 
data to access, said data to access interleaved with 
application program instructions in said instruction 
stream; and 

means for executing , in said user device during 
said execution of said obfuscated application, said 
application program instruction. 

28. (Original) The apparatus of claim 27 wherein said 
application program data comprises at least one 
cryptographic key for use in decrypting data. 
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30. (Original) The apparatus of claim 27 wherein at 
least some of said data to access comprises randomized data. 

31. (Original) The apparatus of claim 30 wherein said 
randomized data is formatted to appear like one or more 
valid instructions . 



GUNNISON, McKAY & 

HODGSON, L.L.P. 
Garden Wefl Office Plaza 
1 900 Garden Road, Suite 220 
Monterey. CA 93940 

(831)655-0880 
Fax (83 1)655-0888 



32. (Currently Amended) The apparatus of claim 27, 
further comprising: 

means for determining , in said user device during 
said execution of said obfuscated application, whether 
there is another application program instruction to be 
executed; 

means for advancing , in said user device during 
said execution of said obfuscated application, said 
current instruction counter if there is another 
application program instruction to be executed; and 

means for repeating , in said user device during 
said execution of said, obfuscated application, said 
receiving said current instruction counter value , said 
app l y ing trans formings and said executing after said 
advancing . 

33. (Currently Amended) An apparatus for application 
program obfuscation, the apparatus comprising: 

means for reading , at an application program 
provider, a first application program comprising 
application program instructions and application 
program data wherein execution of said first 
application program itself provides a service ; 

means for determining , at said application program 
provider, an application program instruction location 
permutation; 

means for determining, at said application program 
provider, a memory storage location for at least one 
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application program instruction of said first 
application program; 

that tranof ormo means for transforming, at said 
application program provider, said memory storage 
location using said application program instruction 
location permutation to generate oaid firot application 
program into an obfuscated application program-? — oaid 
obfuocatcd application program having at least one 
application program instruction stored at a memory 
location that is based at least in part on a 
permutation of the memory storage location of whore the 
corresponding said at least one application program 
instruction io otorcd in said first application 
program; 



mcano for determining a firot instruction location 
of oaid first application program; 

means for determining , at said application program 
provider, an application program data location 
permutation^ 

means for determining,, at said application program 



provider, a memory storage location for at least one 
datum of said first application program; 

that tranof ormo means for transforming, at said 
application program provider, said storage memory 
location of said at least one datum using said 
application program data location permutation to 
generate oaid firot application program into an 
obfuocatcd application program, in said obfuscated 
application program^ having at least one application 
program datum stored at a memory location that is based 
at least in part on a permutation of the memory storage 
location where the corrcoponding application program 
datum of said at least one datum io otorcd in said first 
application program [[;]] j_ 

mcano for determining a firot data location of 
oaid firot application program; 
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wherein said means for transforming 
using applying said application program instruction 
location permutation and said means for 
transforming using said application program data 
location permutation to aaid firat application 
program to create an obfuocatcd application 
program comprioing creates an instruction stream 
for said obfuscated application program having 
application program data interspersed with 
application program instructions; and 
means for sending , at said application program 
provider, said obfuscated application program. 

34. (Original) The apparatus of claim 33 wherein said 
application program data comprises at least one 
cryptographic key for use in decrypting data. 

35. (Original) The apparatus of claim 33 wherein at 
least some of said data to access is formatted to appear 
like one or more valid instructions. 

36. (Original) The apparatus of claim 33 wherein at 
least some of said data to access comprises randomized data. 

37. (Original) The apparatus of claim 36 wherein said 
randomized data is formatted to appear like one or more 
valid instructions. 

38. (Original) The apparatus of claim 33, said 
apparatus further configured to receive an application 
program request from a user device, said determining 
occurring in response to said receiving. 
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39. 



(Currently Amended) The apparatus of claim 3 3 



wherein said apparatus further comprises [[,]] j_ 

after said applying aaid application program 
inotruction location permutation and aaid application 
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program data location permutation, means for applying^ 
following completion of said transf ormings , a 
cryptographic process to said obfuscated application 
program together with a cryptographic key to create an 
encrypted obfuscated application program; and 

said means for sending comprises means for 
sending said encrypted obfuscated application program. 

40. (Currently Amended) An apparatus for executing an 
obfuscated application program, the apparatus comprising a 
user device configured to: 

receive , on said user device, an obfuscated 
application program that comprises application program 
instructions and application program data; 

de t e rmine , in said user device during said 
execution of said obfuscated application, an 
application program instruction location permutation to 
apply to a current instruction counter value; 

determine, i n said user device during said 
execution of said obfuscated application, an 
application program data location permutation to apply 
to a current data location counter value; 

receive , in said user device during said execution 
of said obfuscated application, said current 
instruction counter value; 

apply , in said user device during said execution 
of said obfuscated application, said application 
program instruction location permutation to said 
current instruction counter value to obtain a first 
reference to an application program instruction^ in an 
instruction stream^ to execute; 

apply , in said user device during said execution 
of said obfuscated application, said application 
program data location permutation to data referenced by 
said application program instruction to obtain a second 
reference to data to access, said data to access 
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interleaved with application program instructions in 
said instruction stream; and 

execute , in said user device during said execution 
of said obfuscated application, said application 
program instruction. 

41. (Original) The apparatus of claim 40 wherein said 
application program data comprises at least one 
cryptographic key for use in decrypting data. 

42. (Original) The apparatus of claim 40 wherein at 
least some of said data to access is formatted to appear 
like one or more valid instructions. 

43. (Original) The apparatus of claim 40 wherein at 
least some of said data to access comprises randomized data. 

44. (Original) The apparatus of claim 43 wherein said 
randomized data is formatted to appear like one or more 
valid instructions. 

45. (Currently Amended) The apparatus of claim 40, 
said user device further configured to: 

determine , in said user device during said 
execution of said obfuscated application, whether there 
is another application program instruction to be 
executed; 

advance , in said user device during said execution 
of said obfuscated application, said current 
instruction counter if there is another application 
program instruction to be executed; and 

repeat , in said user device during said execution 
of said obfuscated application, said receiving said 
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current instruction counter value , said 
applying transf ormings and said executing after said 
advancing. . 
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46. (Currently Amended) An apparatus for application 
program obfuscation, the apparatus comprising an application 
program provider configured to: 

read , at said application program provider, a 

first application program comprising application 

program instructions and application program data 

wherein execution of said first application program 

itself provides a service ; 

determine , at said application program provider, 

an application program instruction location 

permutation; 

determine, at said application program provider, a 



memory storage location for at least one application 
program instruction of said first application program; 

that t rano f ormo transform, at said application 
program provider, said memory storage location using 
said application program instruction location 
permutation to generate oaid firot application program 
into an obfuscated application program-? — oaid obfuocatod 
application program having at least one application 
program instruction stored at a memory location that is 
based at least in part on a permutation of the memory 
storage location of where the corrcoponding said at 
least one application program instruction is otorcd in 
said first application program; 

determine a firot instruction location of oaid 
firot application program; 

determine , at said application program provider, 
an application program data location permutation^ 

determine, at said application program provider, a 



memory storage location for at least one datum of said 
first application program; 

that tranof ormo transf orm, at said application 
program provider, said storage memory location of said 
at least one datum using said application program data 
location permutation to generate oaid firot application 
program into an obfuocatod application program, in said 
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obfuscated application program^ having at least one 
application program datum stored at a memory location 
that is based at least in part on a permutation of the 
memory storage location whore the corrcoponding 
application program datum of said at least one datum- are- 
otorcd in said first application program [[;]] j_ 

determine a firot data location of oaid firot 
application program; 

wherein said transforming using apply said 
application program instruction location 
permutation and said transforming using said 
application program data location permutation— to 
aaid firot application program to create an 
obfuocatcd application program comprioing creates 
an instruction stream for said obfuscated 
application program having application program 
data interspersed with application program 
instructions; and 

send , at said application program provider, said 
obfuscated application program. 

47. (Original) The apparatus of claim 46 wherein said 
application program data comprises at least one 
cryptographic key for use in decrypting data. 

48. (Original) The apparatus of claim 46 wherein at 
least some of said data to access is formatted to appear 
like one or more valid instructions. 

49. (Original) The apparatus of claim 46 wherein at 
least some of said data to access comprises randomized data. 

50. (Original) The apparatus of claim 49 wherein said 
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51. (Original) The apparatus of claim 46, said 
application program provider further configured to receive 
an application program request from a user device, said 
determining occurring in response to said receiving. 

52. (Currently Amended) The apparatus of claim 46 
wherein said application program provider is further 
configured to[[,]]j_ 

after oaid applying oaid application program 
inotruction location permutation and said application 
program data location permutation, appl y, following 
completion of said transf ormings , a cryptographic 
process to said obfuscated application program together 
with a cryptographic key to create an encrypted 
obfuscated application program; and 

said application program provider is further 
configured to send said encrypted obfuscated 
application program. 
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